Hardened Linux & Container InfrastructureRené Bon Ćirić
Standard Linux cloud instances and default container setups run with dangerous privileges: root daemons, broad attack surfaces, permissive SELinux, unauthenticated local sockets, and vulnerable supply chains.
This service transforms your Linux hosts and container environments into hardened, immutable, zero-trust infrastructure designed to withstand hostile environments and strict compliance audits.
Scope & Implementation:
SELinux & Kernel Hardening: Transition to SELinux Enforcing mode, author custom Type Enforcement (.te) policies, and kernel sysctl tuning.
Rootless Podman & Systemd Quadlets: Migrate privileged Docker daemons to rootless Podman supervised natively by systemd with user namespace isolation.
PKI, TLS & Secret Hygiene: Private CA setup, automated certificate renewal, memory-backed tmpfs secrets, and strict 600 key permissions.
Declarative Images & RPM Packaging: Immutable system images (mkosi/UKI) and custom RPM packaging following Fedora/EPEL standards.
FAQs
Example work
Starting at$5,000
Duration2 weeks
Tags
Linux
DevOps Engineer
Containers
Security
SELinux
Service provided by
René Bon Ćirić Ixtlahuacán de los Membrillos, Mexico
Hardened Linux & Container InfrastructureRené Bon Ćirić
Starting at$5,000
Duration2 weeks
Tags
Linux
DevOps Engineer
Containers
Security
SELinux
Standard Linux cloud instances and default container setups run with dangerous privileges: root daemons, broad attack surfaces, permissive SELinux, unauthenticated local sockets, and vulnerable supply chains.
This service transforms your Linux hosts and container environments into hardened, immutable, zero-trust infrastructure designed to withstand hostile environments and strict compliance audits.
Scope & Implementation:
SELinux & Kernel Hardening: Transition to SELinux Enforcing mode, author custom Type Enforcement (.te) policies, and kernel sysctl tuning.
Rootless Podman & Systemd Quadlets: Migrate privileged Docker daemons to rootless Podman supervised natively by systemd with user namespace isolation.
PKI, TLS & Secret Hygiene: Private CA setup, automated certificate renewal, memory-backed tmpfs secrets, and strict 600 key permissions.
Declarative Images & RPM Packaging: Immutable system images (mkosi/UKI) and custom RPM packaging following Fedora/EPEL standards.
FAQs
Example work
$5,000